Buy-now-pay-later arrived in Malaysia without a regulator. Not because anyone decided it should be unsupervised, but because it did not fit the definitions: not a credit facility under the Financial Services Act, not hire purchase, not a moneylending business. Four providers grew to several million users inside that gap.
What the Act actually does
The Consumer Credit Act creates a single oversight body for credit businesses that fall outside existing licensing regimes. The substance is less about capping fees than about three unglamorous obligations.
Affordability assessment. Providers must assess whether a borrower can repay before extending credit. Today most run a soft check that takes under a second. An assessment that deserves the name takes longer and declines more people.
Disclosure in ringgit, not percentages. The total cost of a late payment must be stated as an amount. "1.5% per month" and "RM 18" describe the same charge, and only one of them changes behaviour.
A complaints channel that ends somewhere. Disputes currently end at the provider's own support desk.
Why now
The trigger was not a scandal. It was the CCRIS data: the share of BNPL users holding balances at three or more providers simultaneously roughly tripled over two years. No single provider could see that, because none of them reported to a shared bureau.
A provider assessing affordability on its own data is assessing a fraction of the borrower.
That is the specific failure the Act addresses, and it is why the reporting requirement matters more than the fee caps that got the headlines.
What it means for you
If you use one provider occasionally and clear the balance, very little changes except slower approvals. If you are running balances across several, expect declines that did not happen before — which is the mechanism working, not failing.